For details on cookie usage on our site, read our Privacy Policy
GLOBAL PROTECT login failing intermittently with 2 factor authentication for security groups
- LIVEcommunity
- Discussions
- Network Security
- GlobalProtect Discussions
- GLOBAL PROTECT login failing intermittently with 2 factor authentication for security groups
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Printer Friendly Page
GLOBAL PROTECT login failing intermittently with 2 factor authentication for security groups
- Mark as New
- Subscribe to RSS Feed
- Permalink
06-25-2021 11:48 AM
We are implementing 2 factor authentication and it is failing intermittently when using security groups in the authentication profile. When we use "all" in the LDAP tree, it works like a champ. When we go to a single group, it fails with "user not in allow list" but when checking the user database, the user-id is listed. If we use the same authentication group without 2 factor it works every time as well. The timeout for 2 factor has been increased from 60 to 120 seconds. We are also getting the message from our 2 factor auth vendor every time. Although we get prompted twice.
Has anyone else had this issue as it was been a week working with support without progress?
- Panorama and PANOS RADIUS Authentication Failing after upgrade to 10.2 in Panorama Discussions
- Globalprotect with client certificate authentication on Linux (TPM support?) in GlobalProtect Discussions
- GlobalProtect Welcome screen links - PanGPA.exe authentication in GlobalProtect Discussions
- Panorama does not show Built-in External Dyanmic-Lists in Panorama Discussions
- Custom Admin Template Examples for GP Admin and Network Engineer? in Panorama Discussions
Show your appreciation!
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!
